Due to its prevalence, and greater difficulty, our work focuses on Microsoft Windows Portable Executable (PE) malware. Decades of development and compilation to machine code make PE processing and parsing highly non-trivial [1]}, resulting in many levels of processing done by malware detectors to trade off speed and accuracy [2]}, [3]}, [4]}, [5]}.
